Hosted Experience

What this is

The hosted experience lets you embed a full loan journey inside your app using a secure iframe. Your backend creates a session, your frontend renders the iframe, and the platform handles tokens and refresh internally.

Integration at a glance

Backend (server-only): POST /api/loan-journeys/session calls the platform POST /api/lab/sessions with Authorization: Bearer sk_*, borrowerProviderID, and contactNumber (pan optional), then returns embedUrl.
Frontend (client): calls your backend and renders <iframe src={embedUrl}>.

Allowlist required

Your embed domain must be allow-listed per application (embed_domains), or the iframe will be blocked by CSP frame-ancestors.

Next steps

Integration Overview

The end-to-end flow and requirements.

Backend (Next.js App Router)

A server route that returns the embed URL.

Frontend (Next.js Client)

A client component that renders the iframe.